Read the docs
TI-2023-06019 Aliases CVE-2023-6568GHSA-vwhf-3v6x-wff8

Reflected XSS via Content-Type Header in mlflow/mlflow

Priority LOW 31CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-79.

Summary

A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the user without adequate sanitization or escaping, leading to arbitrary JavaScript execution in the context of the victim's browser. The vulnerability is present in the mlflow/server/auth/__init__.py file, where the user-supplied Content-Type header is directly injected into a Python formatted string and returned to the user, facilitating the XSS attack.

Why it matters now

EPSS 0.01649 76th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed mlflow/mlflow (mlflow): 2.9.0mlflow (PyPI): 2.9.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
MLflowmlflow/mlflowbefore 2.9.02.9.0Patch availableCNA
—mlflow (PyPI)before 2.9.02.9.0Patch availableGHSA-vwhf-3v6x-wff8
  • mlflow/mlflow VendorMLflow Affected before 2.9.0 Fixed in 2.9.0 Patch available CNA
  • mlflow (PyPI) Vendor— Affected before 2.9.0 Fixed in 2.9.0 Patch available GHSA-vwhf-3v6x-wff8

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*up to 2.9.0VulnerableMLflow
  • cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:* Versions up to 2.9.0 Vulnerable ·MLflow

Remediation

  • Fix · CNA mlflow/mlflow (mlflow) Fixed in 2.9.0
  • Fix · GHSA-vwhf-3v6x-wff8 mlflow (PyPI) Fixed in 2.9.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-6568
  2. 2026-10-03 Alias added: GHSA-vwhf-3v6x-wff8

References

Exploit 1

Patch 1

Advisory 1

Other 2

  • TI-2026-46366 Server-side request forgery in mlflow KEVCVSS 3.1CRITICAL 9.3
  • TI-2023-03518 Absolute Path Traversal in mlflow/mlflow CVSS 3.1CRITICAL 10.0
  • TI-2023-01113 Path Traversal: '\..\filename' in mlflow/mlflow CVSS 3.1CRITICAL 9.8
  • TI-2025-14028 Command Injection in mlflow/mlflow CVSS 3.1CRITICAL 10.0
  • TI-2023-05540 MLflow Authentication Bypass CVSS 3.1CRITICAL 9.8
  • TI-2023-02603 Path Traversal: '\..\filename' in mlflow/mlflow CVSS 3.1CRITICAL 9.8
See all 76 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences